Securityfocus just published a fascinating article about Email honeypots. Basically the just of it is that a site publishes a page that contains a unique email address and a contract specifying the terms of use for that address, and that those addresses can not be harvested. If a robot comes along and takes the address, the contract gives the site owner the ability to haul the spammer to court.